github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2025-11-17 01:51:52 +03:00
Code Issues Packages Projects Releases Wiki Activity

Adds sanity check to the rule id action

Browse Source
This commit is contained in:
Felipe Zimmerle
2015-09-02 19:19:19 -03:00
parent 6ab88472b1
commit 45d81e1c04
5 changed files with 313 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
src/actions/rule_id.cc
View File

@@ -24,21 +24,33 @@
namespace ModSecurity {
namespace actions {
RuleId::RuleId(std::string action)
: Action(action) {
this->action_kind = ConfigurationKind;
bool RuleId::init(std::string *error) {
std::string a = action;
a.erase(0, 3);
if (a.at(0) == '\'') {
a.erase(0, 1);
a.pop_back();
}
this->rule_id = std::stod(a);
try {
a.erase(0, 3);
if (a.at(0) == '\'') {
a.erase(0, 1);
a.pop_back();
}
m_ruleId = std::stod(a);
} catch (...) {
m_ruleId = 0;
error->assign("The input \"" + a + "\" does not seems to be a valid rule id.");
return false;
}
std::ostringstream oss;
oss << std::setprecision(40) << m_ruleId;
if (a != oss.str() || m_ruleId < 0) {
error->assign("The input \"" + a + "\" does not seems to be a valid rule id.");
return false;
}
return true;
}
bool RuleId::evaluate(Rule *rule, Assay *assay) {
rule->rule_id = this->rule_id;
rule->rule_id = m_ruleId;
return true;
}